HDDS-13909. [STS] Introduce STSTokenIdentifier class

hadoop-ozone/client/src/main/java/org/apache/hadoop/ozone/client/ObjectStore.java

@@ -761,12 +761,8 @@ public Iterator<OzoneSnapshotDiff> listSnapshotDiffJobs(
    * @return AssumeRoleResponseInfo The AssumeRole response information containing temporary credentials
    * @throws IOException            if an error occurs during the AssumeRole operation
    */
-  public AssumeRoleResponseInfo assumeRole(
-      String roleArn,
-      String roleSessionName,
-      int durationSeconds,
-      String awsIamSessionPolicy
-  ) throws IOException {
+  public AssumeRoleResponseInfo assumeRole(String roleArn, String roleSessionName, int durationSeconds,
+      String awsIamSessionPolicy) throws IOException {
     return proxy.assumeRole(roleArn, roleSessionName, durationSeconds, awsIamSessionPolicy);
   }
 

hadoop-ozone/client/src/main/java/org/apache/hadoop/ozone/client/protocol/ClientProtocol.java

@@ -1370,10 +1370,6 @@ void deleteObjectTagging(String volumeName, String bucketName, String keyName)
    * @return AssumeRoleResponseInfo The AssumeRole response information containing temporary credentials
    * @throws IOException            if an error occurs during the AssumeRole operation
    */
-  AssumeRoleResponseInfo assumeRole(
-      String roleArn,
-      String roleSessionName,
-      int durationSeconds,
-      String awsIamSessionPolicy
-  ) throws IOException;
+  AssumeRoleResponseInfo assumeRole(String roleArn, String roleSessionName, int durationSeconds,
+      String awsIamSessionPolicy) throws IOException;
 }

hadoop-ozone/client/src/main/java/org/apache/hadoop/ozone/client/rpc/RpcClient.java

@@ -2792,12 +2792,8 @@ public void deleteObjectTagging(String volumeName, String bucketName,
   }
 
   @Override
-  public AssumeRoleResponseInfo assumeRole(
-      String roleArn,
-      String roleSessionName,
-      int durationSeconds,
-      String awsIamSessionPolicy
-  ) throws IOException {
+  public AssumeRoleResponseInfo assumeRole(String roleArn, String roleSessionName, int durationSeconds,
+      String awsIamSessionPolicy) throws IOException {
     return ozoneManagerClient.assumeRole(roleArn, roleSessionName, durationSeconds, awsIamSessionPolicy);
   }
 

hadoop-ozone/common/src/main/java/org/apache/hadoop/ozone/om/helpers/AssumeRoleResponseInfo.java

@@ -53,30 +53,19 @@ public String getAssumedRoleId() {
     return assumedRoleId;
   }
 
-  public AssumeRoleResponseInfo(
-      String accessKeyId,
-      String secretAccessKey,
-      String sessionToken,
-      long expirationEpochSeconds,
-      String assumedRoleId
-  ) {
+  public AssumeRoleResponseInfo(String accessKeyId, String secretAccessKey, String sessionToken,
+      long expirationEpochSeconds, String assumedRoleId) {
     this.accessKeyId = accessKeyId;
     this.secretAccessKey = secretAccessKey;
     this.sessionToken = sessionToken;
     this.expirationEpochSeconds = expirationEpochSeconds;
     this.assumedRoleId = assumedRoleId;
   }
 
-  public static AssumeRoleResponseInfo fromProtobuf(
-      AssumeRoleResponse response
-  ) {
+  public static AssumeRoleResponseInfo fromProtobuf(AssumeRoleResponse response) {
     return new AssumeRoleResponseInfo(
-        response.getAccessKeyId(),
-        response.getSecretAccessKey(),
-        response.getSessionToken(),
-        response.getExpirationEpochSeconds(),
-        response.getAssumedRoleId()
-    );
+        response.getAccessKeyId(), response.getSecretAccessKey(), response.getSessionToken(),
+        response.getExpirationEpochSeconds(), response.getAssumedRoleId());
   }
 
   public AssumeRoleResponse getProtobuf() {
@@ -91,19 +80,13 @@ public AssumeRoleResponse getProtobuf() {
 
   @Override
   public String toString() {
-    return "AssumeRoleResponseInfo{" +
-        "accessKeyId='" + accessKeyId + '\'' +
-        ", secretAccessKey='" + secretAccessKey + '\'' +
-        ", sessionToken='" + sessionToken + '\'' +
-        ", expirationEpochSeconds=" + expirationEpochSeconds +
-        ", assumedRoleId='" + assumedRoleId + '\'' +
-        '}';
+    return "AssumeRoleResponseInfo{" + "accessKeyId='" + accessKeyId + "', secretAccessKey='" + secretAccessKey +
+        "', sessionToken='" + sessionToken + "', expirationEpochSeconds=" + expirationEpochSeconds +
+        ", assumedRoleId='" + assumedRoleId + "'}";
   }
 
   @Override
-  public boolean equals(
-      Object o
-  ) {
+  public boolean equals(Object o) {
     if (this == o) {
       return true;
     }
@@ -113,21 +96,13 @@ public boolean equals(
     }
 
     final AssumeRoleResponseInfo that = (AssumeRoleResponseInfo) o;
-    return expirationEpochSeconds == that.expirationEpochSeconds &&
-        Objects.equals(accessKeyId, that.accessKeyId) &&
-        Objects.equals(secretAccessKey, that.secretAccessKey) &&
-        Objects.equals(sessionToken, that.sessionToken) &&
+    return expirationEpochSeconds == that.expirationEpochSeconds && Objects.equals(accessKeyId, that.accessKeyId) &&
+        Objects.equals(secretAccessKey, that.secretAccessKey) && Objects.equals(sessionToken, that.sessionToken) &&
         Objects.equals(assumedRoleId, that.assumedRoleId);
   }
 
   @Override
   public int hashCode() {
-    return Objects.hash(
-        accessKeyId,
-        secretAccessKey,
-        sessionToken,
-        expirationEpochSeconds,
-        assumedRoleId
-    );
+    return Objects.hash(accessKeyId, secretAccessKey, sessionToken, expirationEpochSeconds, assumedRoleId);
   }
 }

hadoop-ozone/common/src/main/java/org/apache/hadoop/ozone/om/protocol/OzoneManagerProtocol.java

@@ -1187,14 +1187,8 @@ default void deleteObjectTagging(OmKeyArgs args) throws IOException {
    * @return AssumeRoleResponseInfo The AssumeRole response information containing temporary credentials
    * @throws IOException            if an error occurs during the AssumeRole operation
    */
-  default AssumeRoleResponseInfo assumeRole(
-      String roleArn,
-      String roleSessionName,
-      int durationSeconds,
-      String awsIamSessionPolicy
-  ) throws IOException {
-    throw new UnsupportedOperationException(
-        "OzoneManager does not require this to be implemented"
-    );
+  default AssumeRoleResponseInfo assumeRole(String roleArn, String roleSessionName, int durationSeconds,
+      String awsIamSessionPolicy) throws IOException {
+    throw new UnsupportedOperationException("OzoneManager does not require this to be implemented");
   }
 }

hadoop-ozone/common/src/main/java/org/apache/hadoop/ozone/om/protocolPB/OzoneManagerProtocolClientSideTranslatorPB.java

@@ -2652,12 +2652,8 @@ public void deleteObjectTagging(OmKeyArgs args) throws IOException {
   }
 
   @Override
-  public AssumeRoleResponseInfo assumeRole(
-      String roleArn,
-      String roleSessionName,
-      int durationSeconds,
-      String awsIamSessionPolicy
-  ) throws IOException {
+  public AssumeRoleResponseInfo assumeRole(String roleArn, String roleSessionName, int durationSeconds,
+      String awsIamSessionPolicy) throws IOException {
     final OzoneManagerProtocolProtos.AssumeRoleRequest.Builder request =
         OzoneManagerProtocolProtos.AssumeRoleRequest.newBuilder()
             .setRoleArn(roleArn)
@@ -2670,8 +2666,7 @@ public AssumeRoleResponseInfo assumeRole(
         .build();
 
     return AssumeRoleResponseInfo.fromProtobuf(
-        handleError(submitRequest(omRequest)).getAssumeRoleResponse()
-    );
+        handleError(submitRequest(omRequest)).getAssumeRoleResponse());
   }
 
   private SafeMode toProtoBuf(SafeModeAction action) {

hadoop-ozone/common/src/test/java/org/apache/hadoop/ozone/om/helpers/TestAssumeRoleResponseInfo.java

@@ -46,12 +46,7 @@ public class TestAssumeRoleResponseInfo {
   @Test
   public void testConstructor() {
     final AssumeRoleResponseInfo response = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     assertEquals(ACCESS_KEY_ID, response.getAccessKeyId());
     assertEquals(SECRET_ACCESS_KEY, response.getSecretAccessKey());
@@ -63,12 +58,7 @@ public void testConstructor() {
   @Test
   public void testProtobufConversion() {
     final AssumeRoleResponseInfo response = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     final AssumeRoleResponse proto = response.getProtobuf();
 
@@ -102,12 +92,7 @@ public void testFromProtobuf() {
   @Test
   public void testProtobufRoundTrip() {
     final AssumeRoleResponseInfo originalResponse = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     final AssumeRoleResponse proto = originalResponse.getProtobuf();
     final AssumeRoleResponseInfo recoveredResponse = AssumeRoleResponseInfo.fromProtobuf(proto);
@@ -118,20 +103,10 @@ public void testProtobufRoundTrip() {
   @Test
   public void testEqualsAndHashCodeWithIdenticalObjects() {
     final AssumeRoleResponseInfo response1 = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     final AssumeRoleResponseInfo response2 = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     assertEquals(response1, response2);
     assertEquals(response1.hashCode(), response2.hashCode());
@@ -140,20 +115,10 @@ public void testEqualsAndHashCodeWithIdenticalObjects() {
   @Test
   public void testNotEqualsAndHashCodeWithDifferentAccessKeyId() {
     final AssumeRoleResponseInfo response1 = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     final AssumeRoleResponseInfo response2 = new AssumeRoleResponseInfo(
-        "DIFFERENT_KEY_ID",
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        "DIFFERENT_KEY_ID", SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     assertNotEquals(response1, response2);
     assertNotEquals(response1.hashCode(), response2.hashCode());
@@ -162,20 +127,10 @@ public void testNotEqualsAndHashCodeWithDifferentAccessKeyId() {
   @Test
   public void testNotEqualsAndHashCodeWithDifferentSecretAccessKey() {
     final AssumeRoleResponseInfo response1 = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     final AssumeRoleResponseInfo response2 = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        "DIFFERENT_SECRET_KEY",
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, "DIFFERENT_SECRET_KEY", SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     assertNotEquals(response1, response2);
     assertNotEquals(response1.hashCode(), response2.hashCode());
@@ -184,20 +139,10 @@ public void testNotEqualsAndHashCodeWithDifferentSecretAccessKey() {
   @Test
   public void testNotEqualsAndHashCodeWithDifferentSessionToken() {
     final AssumeRoleResponseInfo response1 = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     final AssumeRoleResponseInfo response2 = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        "DIFFERENT_TOKEN",
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, "DIFFERENT_TOKEN", EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     assertNotEquals(response1, response2);
     assertNotEquals(response1.hashCode(), response2.hashCode());
@@ -206,20 +151,10 @@ public void testNotEqualsAndHashCodeWithDifferentSessionToken() {
   @Test
   public void testNotEqualsAndHashCodeWithDifferentExpirationEpochSeconds() {
     final AssumeRoleResponseInfo response1 = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     final AssumeRoleResponseInfo response2 = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        9999999999L,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, 9999999999L, ASSUMED_ROLE_ID);
 
     assertNotEquals(response1, response2);
     assertNotEquals(response1.hashCode(), response2.hashCode());
@@ -228,20 +163,10 @@ public void testNotEqualsAndHashCodeWithDifferentExpirationEpochSeconds() {
   @Test
   public void testNotEqualsAndHashCodeWithDifferentAssumedRoleId() {
     final AssumeRoleResponseInfo response1 = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     final AssumeRoleResponseInfo response2 = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        "DIFFERENT_ROLE_ID"
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, "DIFFERENT_ROLE_ID");
 
     assertNotEquals(response1, response2);
     assertNotEquals(response1.hashCode(), response2.hashCode());
@@ -250,34 +175,20 @@ public void testNotEqualsAndHashCodeWithDifferentAssumedRoleId() {
   @Test
   public void testNotEqualsWithNull() {
     final AssumeRoleResponseInfo response = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     assertNotEquals(null, response);
   }
 
   @Test
   public void testToString() {
     final AssumeRoleResponseInfo response = new AssumeRoleResponseInfo(
-        ACCESS_KEY_ID,
-        SECRET_ACCESS_KEY,
-        SESSION_TOKEN,
-        EXPIRATION_EPOCH_SECONDS,
-        ASSUMED_ROLE_ID
-    );
+        ACCESS_KEY_ID, SECRET_ACCESS_KEY, SESSION_TOKEN, EXPIRATION_EPOCH_SECONDS, ASSUMED_ROLE_ID);
 
     final String toString = response.toString();
-    final String expectedString = "AssumeRoleResponseInfo{" +
-        "accessKeyId='" + ACCESS_KEY_ID + '\'' +
-        ", secretAccessKey='" + SECRET_ACCESS_KEY + '\'' +
-        ", sessionToken='" + SESSION_TOKEN + '\'' +
-        ", expirationEpochSeconds=" + EXPIRATION_EPOCH_SECONDS +
-        ", assumedRoleId='" + ASSUMED_ROLE_ID + '\'' +
-        '}';
+    final String expectedString = "AssumeRoleResponseInfo{" + "accessKeyId='" + ACCESS_KEY_ID  +
+        "', secretAccessKey='" + SECRET_ACCESS_KEY + "', sessionToken='" + SESSION_TOKEN +
+        "', expirationEpochSeconds=" + EXPIRATION_EPOCH_SECONDS + ", assumedRoleId='" + ASSUMED_ROLE_ID + "'}";
 
     assertNotNull(toString);
     assertEquals(expectedString, toString);